Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/83ujggwyaJUEG2Kpp4wKh6fBgByX2NP5GVT5qJ1P7KAP/2/91B7E6716A44D048F1370CFA1A1700037F360F29.mft
File:                     91B7E6716A44D048F1370CFA1A1700037F360F29.mft (raw, json)
Hash identifier:          3FOfpjAhW4Xmj3i3ZCbx8usqIId2TBLPP0RpmuL3fik=
Subject key identifier:   85:24:5F:1C:AC:08:98:BC:45:41:48:06:D0:9C:78:97:4C:C6:F2:74
Authority key identifier: 91:B7:E6:71:6A:44:D0:48:F1:37:0C:FA:1A:17:00:03:7F:36:0F:29
Certificate issuer:       /CN=91B7E6716A44D048F1370CFA1A1700037F360F29
Certificate serial:       4575E4569FC081F83D8019EABC36CDDEA9E0BA3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91B7E6716A44D048F1370CFA1A1700037F360F29.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/83ujggwyaJUEG2Kpp4wKh6fBgByX2NP5GVT5qJ1P7KAP/2/91B7E6716A44D048F1370CFA1A1700037F360F29.mft
Manifest number:          8D
Signing time:             Wed 17 Jul 2024 07:11:36 +0000
Manifest this update:     Wed 17 Jul 2024 07:06:36 +0000
Manifest next update:     Thu 18 Jul 2024 07:51:36 +0000
Files and hashes:         1: 323830343a323366303a3a2f33322d3332203d3e20323634313932.roa (hash: 5LntxXb8INVjGusUkavu4H2NhNASh0OZ5+XlJ7Bcw2Q=)
                          2: 323830343a323366303a3a2f34302d3430203d3e20323634313932.roa (hash: cqXXfHnj8QHHHWjam0u5j9Gebs5TA12Di4mci5e2qmI=)
                          3: 3133382e39372e3135322e302f32322d3234203d3e20323634313932.roa (hash: /Qbub6KHTbraPPSLgNEF039tT6gH67Sr78sWbhqfomo=)
                          4: 323830343a323366303a3230303a3a2f34302d3430203d3e20323634313932.roa (hash: c4GK5aCyBtaV1//8ZZQgcGhnNpMuwHvZhmjFd5kR/x8=)
                          5: 323830343a323366303a3130303a3a2f34302d3430203d3e20323634313932.roa (hash: siRZbY8Vm3+zIV+UFjn7oGV8zHukTM/0ogHQwcSKTWk=)
                          6: 91B7E6716A44D048F1370CFA1A1700037F360F29.crl (hash: aZ2oWzCkBRHwxAg3+zQEQPMSXd2sVPCC+bpxRVDADR4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:75:e4:56:9f:c0:81:f8:3d:80:19:ea:bc:36:cd:de:a9:e0:ba:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91B7E6716A44D048F1370CFA1A1700037F360F29
        Validity
            Not Before: Jul 17 07:06:36 2024 GMT
            Not After : Jul 18 07:51:36 2024 GMT
        Subject: CN=85245F1CAC0898BC45414806D09C78974CC6F274
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:1f:74:ec:58:0f:a0:2a:05:ee:21:4a:5f:27:
                    0b:6b:73:3c:65:8e:f0:dd:3f:3a:5d:cb:81:f6:5d:
                    d8:ed:7c:ef:43:48:3c:05:6a:e8:33:24:36:00:24:
                    84:5b:4e:6d:bf:d6:44:ab:87:53:73:e1:49:f1:f1:
                    9c:8f:e8:20:72:4c:d2:81:fa:87:16:ec:35:be:29:
                    7c:77:28:0a:cd:80:71:3c:63:d0:26:33:cf:b5:f8:
                    56:9e:00:f9:59:67:da:b8:a0:31:6c:fa:9f:8c:0a:
                    c1:3b:35:e6:7c:ff:95:fd:69:e1:3d:7b:a2:47:f4:
                    2a:f9:ad:c0:d5:fb:41:f0:cb:75:41:08:3f:61:c0:
                    cd:79:2f:47:72:85:c4:68:27:33:0b:d7:d3:9d:59:
                    36:6c:c2:58:d1:a8:be:00:16:43:88:20:30:b7:98:
                    9d:a5:40:db:a5:72:48:82:50:2e:bf:59:d0:1f:04:
                    6c:6b:b2:9d:ab:5d:3e:5e:62:f0:b8:92:62:7e:74:
                    e5:c6:d9:a1:b8:67:80:11:fc:1a:21:cc:31:02:75:
                    eb:34:2b:66:60:91:fe:65:c3:40:d8:a0:97:96:d0:
                    df:8b:01:9c:0f:fa:8e:61:a3:97:ec:e7:3a:b2:d9:
                    a3:e5:65:88:69:ee:13:0c:57:d8:ab:a0:2f:82:bb:
                    ec:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:24:5F:1C:AC:08:98:BC:45:41:48:06:D0:9C:78:97:4C:C6:F2:74
            X509v3 Authority Key Identifier:
                keyid:91:B7:E6:71:6A:44:D0:48:F1:37:0C:FA:1A:17:00:03:7F:36:0F:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/83ujggwyaJUEG2Kpp4wKh6fBgByX2NP5GVT5qJ1P7KAP/2/91B7E6716A44D048F1370CFA1A1700037F360F29.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91B7E6716A44D048F1370CFA1A1700037F360F29.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/83ujggwyaJUEG2Kpp4wKh6fBgByX2NP5GVT5qJ1P7KAP/2/91B7E6716A44D048F1370CFA1A1700037F360F29.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:94:69:9a:3c:7e:45:e8:fd:e6:be:6f:f2:a5:64:ef:26:e6:
         18:43:20:fb:e5:5a:37:c8:9d:02:27:90:f7:ee:f6:79:8b:c8:
         91:7e:b7:0a:2f:d0:6b:39:8c:2f:d5:ab:13:33:b8:31:22:e7:
         6b:dd:09:3c:f1:fc:65:70:47:44:07:90:7a:8d:8c:8a:2b:5c:
         dc:b1:90:8b:e5:db:fe:ef:8c:df:2e:09:98:60:a7:f0:f1:51:
         ce:5c:dd:ea:32:78:23:3b:07:5c:70:08:91:36:a2:40:c6:10:
         c1:83:b2:ff:42:c5:3e:fd:77:8e:a8:1c:06:49:49:fc:3c:ce:
         4c:3b:12:c5:b8:ef:8e:4a:49:85:d4:91:4b:06:19:c4:2b:ba:
         9b:8c:52:5f:fe:93:0c:aa:b8:7b:92:22:65:6f:24:95:a0:c0:
         fe:b6:95:c7:0e:06:f2:64:76:cc:23:39:c5:4b:aa:cb:3e:99:
         29:5e:fc:cc:5d:d9:9b:36:b1:99:2a:6b:e0:01:61:da:1f:d9:
         44:29:cf:18:c5:8f:f3:98:16:f6:d4:44:59:02:5e:80:33:54:
         1d:af:c6:f2:4d:e0:01:fa:c8:8d:64:e3:c0:11:83:b5:48:b8:
         18:dc:34:2b:cb:8e:d0:f0:4c:65:62:3a:78:15:84:07:b6:7e:
         cc:67:0d:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----